Re: Dinamyc and static nat whit only one public ip address?

David,

This is a working (I faked ins. global ip add) static nat config with port
redirection:

ip nat inside source static tcp 192.168.76.2 80 200.200.200.1 81

192.168.76.2 80 = rfc1918 (host's inside local, private ip address and
original tcp port on which host actually listens)
200.200.200.1 81 = global inside ip address by which our host is visible
from the Internet. TCP port is translated port on which NAT router listens
for Internet requests for this translated host. So, our host is visible from
the Internet by 200.200.200.1:81 ip address and TCP port.
This configuration example assumes that the web server is placed behind a
router's 'ip nat inside' interface, that is, in a LAN.

B.R.
Igor



"mckennan" <drequena@xxxxxxxxx> wrote in message
news:1124906214.263310.20360@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> Hi all,
>
> I have the dynamic part already setup in a c1720 with IOS 12.3(9a).
> Internal hosts are accessing internet sharing my public ip address.
>
> No I would like to setup some static port redirections for this same
> public address. For example, I need to be able to make make my web
> server accesible from internet.
>
> If been trying several ip nat source static commands to not avail but
> nothing worked. Performing dynamic nat for outbound connections while
> redirecting inbound connections to certain ports on the outside
> interface should be posible as far as I can think.
>
> At least any consumer grade dsl router I found was able of this...
>
> Thanks for any help, pointers, etc.
> David
>


.

Relevant Pages

  • Re: firewall test and NAT
    ... off Internet address is 192.168.0.xxx. ... Port probes are looking for any open Port, and if they don't find one, they move on to the next possible victim without ever responding with an ACK to the Server. ... SRC is my NAT router on my 1st Ethernet port ...
    (microsoft.public.windowsxp.general)
  • Re: firewall test and NAT
    ... off Internet address is 192.168.0.xxx. ... Port probes are looking for any open Port, and if they don't find one, they move on to the next possible victim without ever responding with an ACK to the Server. ... SRC is my NAT router on my 1st Ethernet port ... "John John" sends a message to "ToddAndMargo", NAT forwards the message and remembers this, it "waits" for a reply from ToddAndMargo and when the reply arrives from ToddAndMargo NAT sends it to John John. ...
    (microsoft.public.windowsxp.general)
  • Re: How did they get past my NAT?
    ... network), I get no response, because there is no "Default host" set up ... behind my NAT, and no port forwarding for that port - if an explicit ... as I understand?), and not forwarded on the router, so there should be ...
    (comp.security.firewalls)
  • Re: Open Ports
    ... I guess what Sharad was saying was that your Internet ... the NAT will make a request to open these ports on your ... NAT server. ... >in an special port used by an application witch i need to ...
    (microsoft.public.windows.server.networking)
  • Re: [fw-wiz] static nat for inside returning traffic
    ... Either way NAPT or NAT you need a Static NAT from the a routable IP ... the outbound initiated access for your inside host. ... route in for any hosts on the Internet, ... behind the PIX's external interface IP or any another global IP ...
    (Firewall-Wizards)